Celltrion (068270.KS) said Monday it has simultaneously obtained the APEC Cross-Border Privacy Rules (CBPR) certification and the Global CBPR certification, a global personal data protection framework developed by the Asia-Pacific Economic Cooperation. It marks the first time a Korean biotech company has earned the certification.
APEC CBPR is a global certification system designed to support secure cross-border transfer and management of personal data among APEC member economies. The Global CBPR is a broader extension of the APEC CBPR framework, establishing security standards suited to global business environments rather than being limited to a specific region. The Korea Internet & Security Agency (KISA) oversees corporate assessments and certification issuance.
The certification is expected to serve as a "fast-pass" card for Celltrion, replacing or simplifying the stringent personal data protection verification procedures required by countries and companies when the firm pursues global technology transfers or joint research. This is expected to reduce administrative burden and shorten negotiation timelines.
Personal data in the bio-industry includes information on doctors, researchers and other specialists participating in global clinical trials and joint studies, as well as information on partner company personnel involved in logistics. As data acquisition and management are core elements of global business, advanced security capabilities are regarded as a key criterion for expanding global partnerships.
In particular, data review procedures are expected to be significantly reduced in countries such as Japan and Singapore that recognize APEC CBPR certification as a valid means for cross-border personal data transfer. Furthermore, the Global CBPR certification obtained simultaneously with the APEC CBPR is expected to serve as a legal foothold for accelerating global business, as it aims to establish universally applicable global data standards.
To earn the certification, Celltrion successfully met evaluation criteria across a total of 50 items, including establishing a personal data protection framework, standards for collection, use and provision of personal data, guaranteeing data subjects' rights, and implementing technical and administrative safeguards.
The company said it plans to continue strengthening its internationally trusted personal data management system, noting that data protection capabilities are emerging as an indicator of corporate transparency and ethical standards from an ESG perspective.
"We have established a foothold to remove legal barriers and shorten timelines for future global licensing agreements and joint research," a Celltrion official said. "Based on the data governance we have secured, we will seize an overwhelming competitive advantage to rapidly execute global business."
